ropshell> use 29d9638b98dea49b7739cd6d3ad26132 (download) name : ntdll.dll (i386/RAW) base address : 0x0 total gadgets: 12744
ropshell> suggest "load reg" > 0x0006dfe2 : pop eax; ret > 0x00023137 : pop ebx; ret > 0x0001ab91 : pop ecx; ret > 0x0001b539 : pop edx; ret > 0x000230f2 : pop esi; ret > 0x0002f1ec : pop edi; ret > 0x0001f76a : pop ebp; ret > 0x0006c2d3 : pop esp; ret > 0x000e824f : popal ; ret > 0x00079b7b : mov eax, [esp + 4]; ret > 0x0007a936 : mov ecx, [esp + 4]; sub eax, ecx; ret > 0x000b18c1 : mov edi, [esp + edi*8]; dec ecx; ret > 0x000965a2 : mov edx, [esp + 0x1c]; cmpxchg8b [ebp]; pop ebp; pop ebx; ret 0x14